CVE-2009-2420

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service…

published July 9, 2009

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01073 · 64.6th percentile
Published
2009-07-09T16:00Z
EPSS history
Timeline
  • 09 JUL 16:00Z
    Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service…
    cvelistv5